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DETAILED ACTION 

1 . This action is issued in response to the Amendment filed on 07/23/2008. 

2. Claims 30 - 31 , 33, 38 - 40, 44, 46, 51 , 52 - 53, 59, and 64 were amended. 
Claims 6-29 were canceled. No claims were added. 

3. This action is made Final. 

4. Claims 1 -5, and 30 - 64 are pending in this application. 

5. Applicant's arguments filed on 07/23/2008 have been fully considered but they 
are not persuasive. 

Specification 

6. The specification is objected to as failing to provide proper antecedent basis for 
the claimed subject matter. See 37 CFR 1.75(d)(1) and MPEP § 608.01 (o). Correction 
of the following is required: "computer readable memory" in claim 38 lacks of 
antecedent basis. 

Claim Rejections - 35 USC §112 

7. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

8. Claims 30-31 , 33, 40, 46, 51 , 53, 59, and 64 are rejected under 35 U.S.C. 1 1 2, 
second paragraph, as being indefinite for failing to particularly point out and distinctly 
claim the subject matter which applicant regards as the invention. 

The limitation "...as permitted" in claim 30 and 33 renders the claims indefinite. 
It's unclear what Applicant's intended metes and bounds of the claim are, since the 
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claim appears to cover anything and everything that does not prohibit actions from 
occurring. 

With respect to claims 30, 31, 33, 40, 46, 51, 53, 59, and 64, the limitation 
"sending a second file request by the client to the server" and the limitation "receiving 
the second request by the proxy" are unclear. Specifically, it is unclear how "the second 
request", which is sent to the server, is received by the proxy. It is unclear whether the 
proxy is located in the server, or whether there is a missing step. 

With respect to claim 46 and 59, the limitation "...to the metadata..." (lines 4-5) 
lacks of antecedent basis. 

Appropriate correction is required. 

Any claim not specifically addressed, above, is being rejected as incorporating 
the deficiencies of a claim upon which it depends. 



Claim Rejections - 35 USC § 102 

9. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 1 22(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 
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1 0. Claims 1-2,4-5, and 30 - 34, 36 - 40, 42 - 47, 49 - 53, 56 - 60, 62 - 64 are 
rejected under 35 U.S.C. 1 02(e) as being anticipated by Chandrashekhar et al. 
(Chandrashekhar hereinafter) (2005/0033988 A1). 

Regarding Claims 1, 32, and 38, Chandrashekhar discloses a method for 
establishing identity in a file system, comprising: 

receiving a file request concerning an indicated file from a client, the request 
received by a proxy (Page 4, [0059] - [0061], Chandrashekhar); 

forwarding the request from the proxy to a file server (Page 4, [0062] - [0065], 
Chandrashekhar); 

returning a reply associated with the file request from the file server to the proxy 
(Page 4, [0066], Chandrashekhar); 

inserting, by the proxy, metadata into the file handle (Page 3 and 4, [0055] and 
[0067] - [0069]; respectively, Chandrashekhar and also see Page 4, [0077] and [0078], 
Chandrashekhar); and 

sending, by the proxy, the file handle with the metadata inserted in the file handle 
to the client, the metadata to be used in further requests to identify the client and the 
indicated file (Page 4, [0070], Chandrashekhar). 

Regarding Claims 2, 34, 47, and 60, Chandrashekhar discloses a method, further 
comprising the step of: 
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using the metadata in the file handles for any of eliminating a need for the proxy 
to generate additional requests to the server to establish file identity, and for completing 
client requests (Page 4, [0085], Chandrashekhar). 

Regarding Claims 4, and 36, Chandrashekhar discloses a method, further 
comprising: 

using an NFS file system as the file system (Page 3, [0037], Chandrashekhar). 

Regarding Claims 5, and 37, Chandrashekhar discloses a method, further 
comprising: 

using a stateless protocol by the file system (Page 3, [0037], Chandrashekhar). 

Regarding Claims 30, and 33, Chandrashekhar discloses a method, further 
comprising: 

sending a second file request by the client to the server (Page 4, [0085] and 
[0059], Chandrashekhar); 

including the metadata in a further file handle sent with the second request (Page 
3 and 4, [0055] and [0067] - [0069]; respectively, Chandrashekhar and also see Page 
4, [0077] and [0078], Chandrashekhar); 

receiving the a second request by the proxy (Page 4, [0061], Chandrashekhar); 

identifying, in response to the metadata, the client as permitted to submit the 
second file request (Page 4, [0068], Chandrashekhar); 
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sending the second request to the file server and not sending the metadata with 
the second file handle to the file server (Page 4, [0070], Chandrashekhar); and 

receiving by the proxy the further reply from the file server, and sending by the 
proxy the further reply to the client (Page 4, [0070], Chandrashekhar). 

Regarding Claim 31, Chandrashekhar discloses a method for establishing 
identity in a file system, comprising: 

receiving a first file request concerning an indicated file from a client, the first file 
request received by a proxy (Page 4, [0059] - [0061], Chandrashekhar); 

forwarding the first file request from the proxy to a file server (Page 4, [0062] - 
[0065], Chandrashekhar); 

returning a reply associated with the first file request from the file server to the 
proxy (Page 4, [0066], Chandrashekhar); 

inserting, by the proxy, metadata into the file handle (Page 3 and 4, [0055] and 
[0067] - [0069]; respectively, Chandrashekhar and also see Page 4, [0077] and [0078], 
Chandrashekhar); 

sending, by the proxy, the file handle with the metadata inserted in the file handle 
to the client, the metadata to be used in further requests to identify the client as having 
a permission to access the indicated file ([0009], "The method includes requesting for a 
file from a client to the proxy server and authenticating a requesting user of the client", 
Page 4, [0070], Chandrashekhar); 
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sending a second file request by the client to the server (Page 4, [0085] and 
[0059], Chandrashekhar); 

including the metadata in a second file handle sent with the second file request; 
receiving the second file request by the proxy (Page 3 and 4, [0055] and [0067] - 
[0069]; respectively, Chandrashekhar and also see Page 4, [0077] and [0078], 
Chandrashekhar); 

identifying, in response to the metadata, that the client has the permission to 
submit the second file request ([0009], "The method includes requesting for a file from a 
client to the proxy server and authenticating a requesting user of the client", Page 4, 
[0068], Chandrashekhar); 

sending the second file request to the file server and not sending the metadata 
with the second file handle to the file server (Page 4, [0070], Chandrashekhar); and 

receiving by the proxy a second reply from the file server, and sending by the 
proxy the second reply to the client (Page 4, [0070], Chandrashekhar). 

Regarding Claims 39, and 45, Chandrashekhar discloses a method for 
establishing identity in a file system, comprising: 

receiving a first file request concerning an indicated file from a client, the first file 
request received by a proxy (Page 4, [0059] - [0061], Chandrashekhar); 

forwarding the first file request from the proxy to a file server (Page 4, [0062] - 
[0065], Chandrashekhar); 
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granting permission for the request to be acted upon by the file system in 
response to a predetermined protocol ([0009], "The method includes requesting for a file 
from a client to the proxy server and authenticating a requesting user of the client", 
Page 4, [0068], Chandrashekhar); 

returning a reply associated with the first file request from the file server to the 
proxy (Page 4, [0066], Chandrashekhar); 

inserting, by the proxy, a session key into the file handle (Page 3 and 4, [0055] 
and [0067] - [0069]; respectively, Chandrashekhar; and also see Page 4, [0077] and 
[0078], Chandrashekhar); and 

sending, by the proxy, the file handle with the session key inserted in the file 
handle to the client, the session key to be used in further requests to identify the client 
and the indicated file (Page 4, [0070], Chandrashekhar). 

Regarding Claims 40, and 46, Chandrashekhar discloses a method, further 
comprising: 

sending a second file request by the client to the server (Page 4, [0085] and 
[0059], Chandrashekhar); 

including the session key in a second file handle sent with the second file request 
(Page 3 and 4, [0055] and [0067] - [0069]; respectively, Chandrashekhar and also see 
Page 4, [0077] and [0078], Chandrashekhar); 

receiving the second file request by the proxy (Page 4, [0061], Chandrashekhar); 
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identifying, in response to the session key, that the client has the permission to 
submit the second file request ([0009], "The method includes requesting for a file from a 
client to the proxy server and authenticating a requesting user of the client", Page 4, 
[0068], Chandrashekhar); 

sending the second file request to the file server and not sending the session key 
with the second file handle to the file server (Page 4, [0070], Chandrashekhar); and 

receiving by the proxy a second reply from the file server, and sending by the 
proxy the second reply to the client (Page 4, [0070], Chandrashekhar). 

Regarding Claims 43, and 49, Chandrashekhar discloses a method, further 
comprising: 

using a NFS protocol as the predetermined protocol (Page 3, [0037], 
Chandrashekhar). 

Regarding Claims 44, and 50, Chandrashekhar discloses a method, further 
comprising: 

using as the predetermined protocol a two way communication exchange 
between the proxy and the file server (Fig. 1 , Chandrashekhar). 

Regarding Claim 51, Chandrashekhar discloses an apparatus to establish 
identity in a file system, comprising: 
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a proxy to receive a first file request sent by a client to a file system, the proxy to 
forward the first file request to a file server (Page 4, [0059] - [0061], Chandrashekhar); 

the file server to return a reply associated with the first file request to the proxy 
(Page 4, [0066], Chandrashekhar); 

the proxy to insert a session key into a file handle (Page 3 and 4, [0055] and 
[0067] - [0069]; respectively, Chandrashekhar and also see Page 4, [0077] and [0078], 
Chandrashekhar); 

the proxy to send the file handle with the session key inserted in the file handle to 
the client, the session key to be used in a second file request to identify the client and 
the indicated file (Page 4, [0070], Chandrashekhar); 

the client to send a second file request to the server, the client to include the 
session key in a second file handle sent with the second file request (Page 3 and 4, 
[0055] and [0067] - [0069]; respectively, Chandrashekhar and also see Page 4, [0077] 
and [0078], Chandrashekhar); 

the proxy to receive the second file request, and the proxy to identify, in response 
to the session key, the client having a permission to submit the second file request, and 
the proxy to send the second file request to the file server and not to send the session 
key with the second file handle to the file server ([0009], "The method includes 
requesting for a file from a client to the proxy server and authenticating a requesting 
user of the client", Page 4, [0085] and [0059], Chandrashekhar); and 

the proxy to receive a second reply from the file server, and the proxy to send the 
second reply to the client (Page 4, [0070], Chandrashekhar). 
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Regarding Claims 52, and 58, Chandrashekhar discloses a method for 
establishing identity in a file system, comprising: 

receiving a first file request concerning an indicated file from a client, the first file 
request received by a proxy (Page 4, [0059] - [0061], Chandrashekhar); 

forwarding the first file request from the proxy to a file server (Page 4, [0062] - 
[0065], Chandrashekhar); 

determining that the client has a permission to have the request acted upon by 
the file system in response to a predetermined protocol ([0009], "The method includes 
requesting for a file from a client to the proxy server and authenticating a requesting 
user of the client", Page 4, [0068], Chandrashekhar); 

returning a reply associated with the first file request from the file server to the 
proxy (Page 4, [0066], Chandrashekhar); 

inserting, by the proxy, a cryptographic information into the file handle (Page 3 
and 4, [0055] and [0067] - [0069]; respectively, Chandrashekhar; and also see Page 4, 
[0077] and [0078], Chandrashekhar); 

sending, by the proxy, the file handle with the cryptographic information inserted 
in the file handle to the client, the cryptographic information to be used in one or more 
requests to identify the client and the indicated file (Page 4, [0070], Chandrashekhar). 

Regarding Claims 53, and 59, Chandrashekhar discloses a method, further 
comprising: 
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sending a second file request by the client to the server (Page 4, [0085] and 
[0059], Chandrashekhar); 

including the cryptographic information in a second file handle sent with the 
second file request (Page 3 and 4, [0055] and [0067] - [0069]; respectively, 
Chandrashekhar and also see Page 4, [0077] and [0078], Chandrashekhar); 

receiving the second file request by the proxy (Page 4, [0061], Chandrashekhar); 

identifying, in response to the cryptographic information, that the client has 
permission to submit the second file request ([0009], "The method includes requesting 
for a file from a client to the proxy server and authenticating a requesting user of the 
client", Page 4, [0068], Chandrashekhar); 

sending the second file request to the file server and not sending the 
cryptographic information with the second file handle to the file server (Page 4, [0070], 
Chandrashekhar); and 

receiving by the proxy a second reply from the file server, and sending by the 
proxy the second reply to the client (Page 4, [0070], Chandrashekhar). 

Regarding Claims 56, and 62, Chandrashekhar discloses a method, further 
comprising: 

using a NFS protocol as the predetermined protocol (Page 3, [0037], 
Chandrashekhar). 
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Regarding Claims 57, and 63, Chandrashekhar discloses a method according, 
further comprising: 

using as the predetermined protocol a two way communication exchange 
between the proxy and the file server (Fig. 1 , Chandrashekhar). 

Regarding Claim 64, Chandrashekhar discloses an apparatus to establish 
identity in a file system, comprising: 

a proxy to receive a first file request sent by a client to a file system, the proxy to 
forward the first file request to a file server (Page 4, [0059] - [0061], Chandrashekhar); 

the file server to return a reply associated with the first file request to the proxy 
(Page 4, [0066], Chandrashekhar); 

the proxy to insert a cryptographic information into a file handle (Page 3 and 4, 
[0055] and [0067] - [0069]; respectively, Chandrashekhar and also see Page 4, [0077] 
and [0078], Chandrashekhar); 

the proxy to send the file handle with the cryptographic information inserted in the 
file handle to the client, the cryptographic information to be used in a second file request 
to identify the client and the indicated file (Page 4, [0070], Chandrashekhar); 

the client to send a second file request to the server, the client to include the 
cryptographic information in a second file handle sent with the second file request (Page 
4, [0085] and [0059], Chandrashekhar); 

the proxy to receive the second file request, and the proxy to identify, in response 
to the cryptographic information, the client as having a permission to submit the second 
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file request, and the proxy to send the second file request to the file server and not to 
send the cryptographic information with the second file handle to the file server ([0009], 
"The method includes requesting for a file from a client to the proxy server and 
authenticating a requesting user of the client", Page 4, [0085] and [0059], 
Chandrashekhar); and 

the proxy to receive a second reply from the file server, and the proxy to send the 
second reply to the client (Page 4, [0070], Chandrashekhar). 

Claim Rejections - 35 USC § 103 

1 1 . The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

12. This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 



Application/Control Number: 10/803,788 Page 15 

Art Unit: 2162 

13. Claims 3, 35, 41, 48, 54-55, and 61 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Chandrashekhar et al. (Chandrashekhar hereinafter) 
(2005/0033988 A1) in view of Ohazama et al. (Ohazama hereianfter) (US 7,225,207 
B1). 

Regarding Claims 3, and 35, Chandrashekhar discloses all the limitations as 
discussed above including a method, further comprising: encoding metadata in a form 
of a session key into the file handle. However, Chandrashekhar does not expressly 
disclose that such session expires. Ohazama discloses: a session key which expires 
after a predetermined amount of time (Col. 7, lines 60 - 63, Ohazama). It would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
incorporate the Ohazama's teachings to the system of Chandrashekhar. Skilled artisan 
would have been motivated to do so, as suggested by Ohazama (Col. 7, lines 55 - 63, 
Ohazama), to provide validate the user and restrict access to the database, and to 
prevent old session keys from being stolen or reused. 

Regarding Claims 41 , and 48, the combination of Chandrashekhar in view of 
Ohazama discloses a method according to claim 39, further comprising: 

causing the session key to expire after a selected amount of time (Col. 7, lines 60 
- 63, Ohazama). 
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Regarding Claims 42, the combination of Chandrashekhar in view of Ohazama 
discloses a method, further comprising: 

causing the session key to expire after a selected amount of usage (Col. 14, lines 
7-14, Ohazama). 

Regarding Claims 54, and 61 , the combination of Chandrashekhar in view of 
Ohazama discloses a method, further comprising: 

causing the cryptographic information to expire after a selected amount of time 
(Col. 7, lines 60 - 63, Ohazama). 

Regarding Claim 55, the combination of Chandrashekhar in view of Ohazama 
discloses a method, further comprising: 

causing the cryptographic information to expire after a selected amount of usage 
(Col. 14, lines 7- 14, Ohazama). 

Response to Arguments 

14. In response to applicant's argument that the references fail to show certain 
features of applicant's invention, it is noted that the features upon which applicant relies 
(i.e., "modifying a file handle", "modifying a file handle, and then using the modified file 
handle") are not recited in the rejected claim(s). Although the claims are interpreted in 
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light of the specification, limitations from the specification are not read into the claims. 
See In re Van Geuns, 988 F.2d 1 181 , 26 USPQ2d 1057 (Fed. Cir. 1993). 

1 5. Applicant argues that; "inserting, by the proxy, metadata into the file handle; and 
sending, by the proxy, the file handle with the metadata inserted in the file handle to the 
client, the metadata to be used in further requests to identify the client and the indicated 
file". 

Examiner respectfully disagrees. Chandrashekhar does disclose: inserting, by 
the proxy, metadata into the file handle (Page 3 and 4, [0055] and [0067] - [0069]; 
respectively, Chandrashekhar and also see Page 4, [0077] and [0078], 
Chandrashekhar); and sending, by the proxy, the file handle with the metadata inserted 
in the file handle to the client, the metadata to be used in further requests to identify the 
client and the indicated file (Page 4, [0070], Chandrashekhar). 

16. Applicant argues that; "Chandrasekhar has no disclosure concerning a 'file 
handle'". 

Examiner respectfully disagrees. Chandrasekhar does disclose file handle (Page 
3 and 4, [0055] and [0067] - [0069]; respectively, Chandrashekhar and also see Page 
4, [0077] and [0078], wherein the header information corresponds to the file handle as 
claimed; Chandrashekhar). 
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Conclusion 

17. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 



1 8. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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Points Of Contact 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to GIOVANNA COLAN whose telephone number is 
(571)272-2752. The examiner can normally be reached on 8:30 am - 5:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John Breene can be reached on (571) 272-4107. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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